
Explore the tcp/ip protocol suite in depth with a hands-on, wireshark-driven approach to capture live packets, inspect headers, and understand protocol interrelations in real time.
Learn tcp/ip prerequisites across Windows, Linux, and Mac OS, and gain a bottom-up view of how network interfaces, cabling, and wireless cards enable web browsers and email clients.
Explore foundational tcp/ip protocols, from ip and tcp to udp and arp, and examine header fields of application layer protocols like smtp, http, and pop, with packet analysis using wireshark.
Trace the origin and evolution of tcp/ip from ARPANET's 1969 four-node inception to the 1980s and 1990s growth of the internet via the NSFnet backbone.
Learn how tcp/ip enables everyday internet communication by encapsulating http requests in ip across ethernet or wireless, supporting tools like ping and mail.
Explore the Open Systems Interconnection model's seven layers from physical to application, explain encapsulation, and how layer-to-layer communication routes data across networks.
Explore the four-layer tcp/ip model: network access, internet, transport, and application. Note that the network access layer wraps data link and physical layers, while udp and tcp differ in reliability.
Capture and analyze network packets to diagnose issues, using tools like TZP dump and Wireshark, and distinguish unicast from broadcast traffic while exploring promiscuous mode.
Use Wireshark, the world's most popular network protocol analyzer, to capture live packets, across Mac, Windows, and Linux, filter by ip addresses and protocols, and follow the tzp stream.
Discover how the IETF shapes internet protocols through open development, RFCs, and working groups, ensuring standards like SIP and IP evolve and remain interoperable.
Explore how protocols are sets of rules that govern communication, from everyday greetings to computer exchanges, ensuring eye contact, context, staying on the same page, and mutual understanding.
Explore essential networking utilities across macOS, Linux, and Windows, including ifconfig/ipconfig, netstat, netcat, and telnet; learn to view interfaces, ports, listening services, and basic connections.
Explore the ethernet family of protocols, its layer 2 data link and layer 1 physical aspects, cabling like cat5/6, coaxial, RJ-45, shared media, and speeds from 10/100/1000 base.
Explore layer 2 addresses, especially MAC addresses bound to network interface cards, enabling local delivery across Ethernet and illustrating why these addresses stay separate from layer 3 IP addresses.
Discover the point-to-point protocol (ppp) as the slip successor, detailing lcp, encapsulated protocols such as ip/ipx, and setup through configuration requests, pppoe for dsl and authentication using eap or chap.
Explore wide area network protocols like Sonnett, asynchronous transfer mode, and frame relay, including 53-byte cells, protocol data units, and congestion control in internet and site-to-site connections.
Explore how virtual local area networks create logical isolation on a single switch using 802.1Q VLAN tagging to separate traffic by network segments and keep broadcasts contained.
Explore the purposes of the network layer, including forwarding packets between networks, using logical IP addressing and routing tables, distinguishing logical addresses from MAC addresses, and understanding default gateway concepts.
Explore IP headers in wireshark captures, including version and header length, diffserv for qos, total length, IP ID, fragmentation flags, TTL, protocol, checksum, and source and destination addresses.
Learn how IP addresses use four octets of 8 bits and a subnet mask to separate network and host portions, with network and broadcast addresses and 254 usable host addresses.
Learn how routing operates at the network layer to move packets between networks, using subnet masks, routing tables, and default gateways, and tracing path with trace route across multiple routers.
Explore BGP, the core internet routing protocol used by large providers, and how distance-vector metrics, autonomous system numbers, and open, update, and keepalive messages shape routing paths.
Explore the routing information protocol (RIP), a distance-vector protocol using hop count and split horizon. RIP uses UDP broadcasts and classful addressing with no authentication, suitable for small networks.
Explore OSPF, an interior gateway protocol and open shortest path first link-state routing protocol, that builds a topology map using area-based LSAs and Dijkstra's algorithm to find the quickest path.
Explore how ARP links layer 3 IP addresses to layer 2 MAC addresses on local networks through a two-step ARP request and reply, with timeouts and no authentication.
Explore ARP spoofing, revealing how gratuitous ARP and simple IP-to-MAC mappings enable attackers to redirect gateway traffic, capture messages, and disrupt network flow using common tools.
Describe how the reverse address resolution protocol uses a MAC address to obtain an IP address, enabling diskless workstations to boot from a server.
Learn how internet registries, overseen by ICANN and the DNS root servers, store ownership data for IP addresses, domains, and contacts via whois.
Explore how BootP and DHCP bootstrap network configuration using UDP, client-server exchanges, and IP address leases, including discovery, offer, renewal, and server-side options like DNS, router, and time server.
Explore IP configuration on Windows by using ipconfig and ipconfig /all to view adapters, IP addresses, MAC addresses, and the default gateway, then configure DHCP or manual settings.
Explore how IP fragmentation balances data size and MTU, with Ethernet's 1500-byte limit. See how the IP ID and fragment offset enable reassembly of fragmented packets in a Wireshark capture.
Explore ICMP, the internet control message protocol, and how it works with IP to provide diagnostics and error messages, including reachability and distance to a system.
Explore ICMP message types for diagnostics and error reporting, including destination unreachable, time exceeded, parameter problem, source quench, redirect, and echo and echo reply used by ping to verify hosts.
Explore how the ping utility uses ICMP echo request and echo reply messages to determine if a device is up, and how larger payloads and MTU affect timing and fragmentation.
Analyze how ICMP error messages drive trace route and packet capture, showing time to live exceeded and destination unreachable to map network routes, diagnose routing issues, and understand load balancing.
Explains ICMP attacks, including using ping with large packets and spoofed source addresses to overwhelm a target, and introduces the smurf attack and ICMP broadcast amplifier.
The transport layer multiplexes apps over an address using source and destination ports, enabling end-to-end delivery with TCAP's reliable, connection-oriented transfers and UDP's checksum-validated, unreliable service to the correct port.
Examine tcap headers in tcp packets, noting source and destination ports, sequence and acknowledgement numbers, data offset, and essential flags like urgent, ack, push, reset, and synchronize.
Explore the tcap three-way handshake and how it establishes a reliable connection with window size negotiation, using syn, syn-ack, and ack exchanges, with a Wireshark demo.
Drive flow control and reliability by confirming receipt of sequence numbers and enabling timely, ordered data delivery; it examines a three-way handshake, sequence and acknowledgement numbers, and retransmission.
Explore how the sliding window controls reliable data transmission by tracking window size, sequence numbers, and acknowledgments to slide the window across bytes.
Learn how session teardown terminates bi-directional tcp/ip streams by both ends sending fin and ack, ensuring both sides acknowledge closure and prevent lingering communication.
Learn how TCP states arise from the three-way handshake and how netstat reveals listen, syn sent, syn received, half-open, established, close-wait, closing, time-wait, and closed connections.
Examine port behavior with nmap, showing open ports with a three-way handshake, closed ports returning a reset, and filtered ports dropping packets, across ports 80, 5555, and 3.
Explore the uses of UDP, focusing on speed over delivery guarantees and minimal overhead. Learn how DNS lookups, gaming, voice over IP, and streaming media rely on fast, datagram-based communication.
Explore how a UDP packet uses a compact 8-byte header with source and destination ports, length, and checksum for fast, low-overhead delivery and multiplexing.
Explore streaming audio in a voice over IP call by using UDP for SIP signaling and RTP transport, with codecs, audio parameters, and low-overhead transmission.
Explore the purposes of the session layer, focusing on session management, authentication and authorization, and session restoration after interruption, with RPC, NetBIOS, and AppleTalk protocols in layer 5.
Demonstrate SSL/TLS session establishment by capturing a handshake between a client and Google, exchanging certificates, selecting a cipher suite, and switching to encrypted application data.
ssh is a session layer protocol that establishes an encrypted channel for remote login and file transfers, replacing telnet, with host key verification, public key authentication, and diffie-hellman key exchange.
Explore how the RTP control protocol, a session layer protocol, carries statistics and quality information for real-time media, supports session checkpointing and recovery, and coordinates paired UDP ports with RTP.
Discover how remote procedure calls let a client and server communicate over a network, using stubs, messages, and a negotiated session, with data representation like ASCII and little-endian.
Explore how the application layer delivers user-facing functionality by handling protocols for remote login, email, DNS, and file transfers, with browsers using HTTP.
Explore HTTP, the hypertext transport protocol that governs browser to server communication, including GET requests, 200 OK, 404 not found, and host headers for virtual hosts.
Explore telnet as a client, server, and protocol, showing telnet sessions negotiate options, authenticate on port 23 with a password in clear text, and transmit data character by character.
Discover the ftp protocol for transferring files between unix-like systems, covering login with user and pass, commands like list, put, get, and the ascii versus binary transfer modes.
Discover how SMTP sends messages, using commands like mail, rcpt to, and data with postfix on Linux, and examine authentication versus open relay risks in a simple test server.
Explore pop3 as a mail retrieval protocol, including authentication, listing, retrieving, and deleting messages. Contrast it with imap's server-stored approach that keeps messages on the server.
Explore Windows file sharing through the server message block (SMB) protocol, tracing SMB commands and NetBIOS history to understand file access and directory operations.
Learn how the domain name system maps host names to IP addresses through a hierarchical, recursive lookup, using root servers, top-level domains, and local DNS caching to speed queries.
Learn how the DNS protocol maps host names to IP addresses using A records, UDP queries, and recursive lookups in the domain name system, including CNAMEs, TTLs, and reverse lookups.
Firewalls, software or hardware, control network traffic to protect your network or device. They span packet filters to stateful and application-layer types, with port forwarding and DMZ hosts.
Learn how a stateful firewall with iptables tracks connection state, using the output chain to drop new traffic and allow established or related replies on ports 80 and 443.
Learn to configure extended access control lists on a Cisco router to permit or deny traffic by protocol and port, using wildcard bits for edge filtering without replacing stateful firewalls.
Explore application layer firewalls, focusing on proxy servers, rate limiting, content filtering, and malware checks to protect networks and optimize traffic, with session border controllers and voip gateways as examples.
Explore network intrusion detection by analyzing packets against signatures and rules to detect alerts from Snort. Understand port usage, source and destination addresses, and how false positives arise.
Explore spoofing traffic and man-in-the-middle attacks using arp poisoning with cap, showing how attackers hijack traffic by spoofing arp caches on switched networks.
Explore malicious traffic types, including sin flood with spoofed sources and denial of service, fragmented IP attacks like teardrop, and related defenses in modern systems.
Build packets with PackETH, configuring link layer and IPv4/IPv6. Set MAC and IP addresses, apply payload patterns, spoof addresses, and send via an interface with admin privileges for testing.
Explore building custom packets with hping to perform port scans and craft IP, ICMP, TCP, and UDP messages from scratch, observing flags, TTL, and responses on Linux.
In this TCP/IP training course from Infinite Skills, you will learn all about the standard communication protocol for the internet. TCP/IP (Transmission Control Protocol / Internet Protocol) defines how devices connect to, and communicate through the internet. This tutorial explains how TCP/IP packages, addresses, routes and delivers data over a networks.
Throughout this video based training video, you use various network tools to capture and dissect network packets. You will explore, in detail, the IP (Internet Protocol), ICMP, TCP, UDP, and how they all interact together. You will explore how TCP/IP works through the Session and Application layers of the OSI model. Wireless network fundamentals is also covered, with tips on protecting your data with WEP and WPA. Finally, the course breaks down what IPv6 is, and why it is important.
The training is designed to be a beginners course on the theory and hands on analysis of TCP/IP. By the time you have completed this course, you will have a thorough understanding of what a packet is and how it delivers data from point to point using TCP/IP.